[Bug 709553] Re: apport does not catch crashes of priv-dropped processes

[Marcus Tomlinson]

This release of Ubuntu is no longer receiving maintenance updates. If
this is still an issue on a maintained version of Ubuntu please let us
know.

** Changed in: apport (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apport in Ubuntu.
https://bugs.launchpad.net/bugs/709553

Title:
  apport does not catch crashes of priv-dropped processes

Status in apport package in Ubuntu:
  Incomplete

Bug description:
  Binary package hint: apport

  Currently, the kernel checks /proc/sys/fs/suid_dumpable to see if a
  process that has dropped privileges is allowed to dump core. However,
  this policy check happens well before the spawning of the userspace
  crash handler.

  It would make sense for a new pattern "%d" to mean "dumpable" so that
  the userspace crash handler can decide what do do with it. If a dump
  is seen as "0" for non-dumpable, the userspace handler can choose to
  dump anyway, but keep the report owned by root.

  This would obviously need kernel changes to move the policy checks
  around, though.

  ProblemType: Bug
  DistroRelease: Ubuntu 11.04
  Package: apport 1.17.1-0ubuntu3
  ProcVersionSignature: Ubuntu 2.6.38-1.27-generic 2.6.38-rc2
  Uname: Linux 2.6.38-1-generic x86_64
  Architecture: amd64
  Date: Fri Jan 28 15:37:23 2011
  EcryptfsInUse: Yes
  InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Beta amd64 (20100406)
  PackageArchitecture: all
  ProcEnviron:
   LANGUAGE=en_US.UTF-8:en
   PATH=(custom, user)
   LANG=en_US.UTF-8
   LC_MESSAGES=en_AG.utf8
   SHELL=/bin/bash
  SourcePackage: apport

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apport/+bug/709553/+subscriptions